Suspicious
Suspect

8137bc02b154b2f08c5dbd7ef924be49

PE Executable
MD5: 8137bc02b154b2f08c5dbd7ef924be49
Size: 892.42 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 8137bc02b154b2f08c5dbd7ef924be49
Sha1 e291aeac6b001b0da1ce079169d9fd1c6c2df1e2
Sha256 3e11f7bd7b21eaa465fab6079458db678dfbe7099e9f2023c1f7f0c912e53d94
Sha384 318ab20e1c167720a6313834669866faf26659edeb08f35cce63831e344c0f555e7d6e848fcca080cfc040013ab8516d
Sha512 cf6f17d94b061da0ddc37ff527d8950f9b7482f574c9d4d6505f1edafb3cec10fa08f2150e6005208abbe845c2693d7ecb13d040c241de1acd5e90f8b4cd9dd5
SSDeep 24576:mCXrI648ytyrSNSRGfAPu5N8lJKR1MmrHc:lIVtyQGyaA841prc
TLSH 5515121C779A9B17E8360FF95AA6D07013366CCEA962D3056ED42EDF7138F404A60B63
PeID
ASProtect v1.32
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
SaltPan.HuvudForm.resources
SaltPan.Properties.Resources.resources
FXAa
[NBF]root.Data
[NBF]root.Data-preview.png
IMG
[NBF]root.Data
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
nUyX.exe
Full Name
nUyX.exe
EntryPoint
System.Void SaltPan.Program::Main()
Scope Name
nUyX.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
nUyX
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
262
Main Method
System.Void SaltPan.Program::Main()
Main IL Instruction Count
10
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void SaltPan.HuvudForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
SaltPan.HuvudForm.resources
SaltPan.Properties.Resources.resources
FXAa
[NBF]root.Data
[NBF]root.Data-preview.png
IMG
[NBF]root.Data
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙